5 ms·
Does the issue still exist if you register an $80 SMTP outbox and spoof the address?
by hoerzu 3y ago
Does the issue still exist if you register an $80 SMTP outbox and spoof the address?
- Thorrez 3y agoThe slides say yes: >● Anyone is still able to sign up on MCs website and for 80$ spoof all their customers via their SMTP relay. You’re fully trusting in their mitigating controls.
- ttul 3y agoThought experiment: Would an email sending service that sends email for 42% of the domains globally that send through a transactional service [1] possibly exist on today's internet if it _wasn't_ incredibly good at blocking spam? The DEFCON presenter makes the assertion that you can set up a spamming operation for $80/mo, but has he tried? [1] https://trends.builtwith.com/mx/transactional-email/traffic/Entire-Internet https://trends.builtwith.com/mx/transactional-email/traffic/...
- Manouchehri 3y agoSendGrid isn't great at blocking spam, and they're a billion dollar company. So yes.
- ttul 3y agoSendGrid send roughly 8% of all internet email. At their scale, controlling abuse is extremely difficult. Gmail originates a huge amount of spam and phishing. The bigger you are, the more spammers will work to target you and the harder you have to work to fight back against them.
- weird-eye-issue 3y agoI can't sign up for Sendgrid and then send signed email on behalf of another Sendgrid customer.
- Manouchehri 3y agoWait.. isn’t this now the argument against your original thought experiment?
- MetaWhirledPeas 3y agoWhy is spam the only consideration? What about ad hoc fraud?
- hackideiomat 3y agoYes, 100% yes. As can be seen with your company.
- tomschwiha 3y agoMost drugs are not legal, still they exist. The examples in the slides show that your company allowed spam. Why is it so tough to admit a mistake? We all do sometimes misconceptions, some even at scale.
- baobabKoodaa 3y agoIt's incredibly infuriating to read your replies here. You clearly don't care at all about email security, you don't take responsibility for your mistakes, and you have the GALL to comment like this. Awful.